$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08948b09-6fc1-344a-9112-728d8ee52b11.roa File: 08948b09-6fc1-344a-9112-728d8ee52b11.roa (raw, json) Hash identifier: UxpdpYMCteE0irMc82Xs6wawA6ZyBIoxRscJsxzhgzE= Subject key identifier: B1:E4:F3:AB:67:F3:21:49:A4:A5:8A:63:EA:3E:B2:FB:1C:D0:7F:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD301A5CB7D6524631780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08948b09-6fc1-344a-9112-728d8ee52b11.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396589 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d3:01:a5:cb:7d:65:24:63:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=a76ac8db-bfa3-4b6c-90df-5ee1d59a697a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:b9:ac:26:c6:23:32:a3:03:a7:8b:80:0e: 04:f2:84:29:9a:b3:c1:9f:f3:0f:8e:aa:bd:79:03: ff:6c:7b:08:d8:22:d4:b4:c0:06:72:27:c2:5d:73: 2f:96:12:bf:7a:2b:89:ea:f8:7b:fd:0f:d5:2d:7b: 55:51:15:ff:e4:12:1c:82:04:27:42:68:06:a6:22: e8:b1:a8:bd:fe:3e:da:d8:e1:d7:2e:e5:94:21:fe: 5d:5f:af:ce:27:b0:e3:26:b7:44:68:57:86:e4:3a: 4e:1d:10:78:dd:d8:ef:50:d6:b6:05:9c:1f:e5:d8: eb:e0:dc:f0:27:44:e4:91:01:72:8a:2c:b1:12:7d: fb:ad:cd:1b:14:fa:88:78:f9:5d:59:6f:76:1b:95: e8:6a:fc:d4:72:27:0e:85:b8:d8:3d:82:da:61:ad: b8:ad:17:05:c8:e7:c8:5d:d8:e1:bb:5a:eb:01:17: 83:2a:10:06:7c:74:68:a0:31:f3:47:2b:76:12:93: 80:98:c0:bd:13:6d:5c:00:f0:33:a2:33:7f:09:a1: 70:2f:be:ab:60:eb:03:8d:59:e7:49:24:29:e1:04: 8c:d2:2e:52:ac:20:f0:08:82:8a:97:62:5e:25:4e: cf:61:c5:36:5c:4e:cb:ec:bd:d4:9f:59:df:05:03: 82:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E4:F3:AB:67:F3:21:49:A4:A5:8A:63:EA:3E:B2:FB:1C:D0:7F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08948b09-6fc1-344a-9112-728d8ee52b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1c:67:b2:74:a2:23:73:d9:a1:a4:bb:25:a9:3f:d3:aa:10: 6f:63:3a:7f:bb:3f:7e:d5:f6:1b:45:75:20:59:a3:6d:86:32: 01:f5:2e:91:e2:c5:0f:28:fd:fd:13:e9:64:99:ec:46:fe:65: 48:9f:9b:fc:28:0b:a0:00:e0:ae:57:bb:42:13:ac:81:44:e6: 13:8b:7f:bb:25:60:b0:3e:c6:e7:e1:b1:e0:a4:f4:60:9f:53: 19:6c:b4:04:40:27:3b:5d:0d:fe:12:d9:af:1f:81:59:bc:9b: 2c:1b:2c:4a:0a:ab:5a:33:89:83:f6:b0:62:55:79:02:21:44: fa:69:9b:10:5c:9f:74:5c:63:b9:1f:93:7c:3a:13:d3:91:44: 87:59:d3:de:3f:9a:69:2f:82:39:37:83:8a:31:0d:d0:7c:1e: 30:b2:25:b6:71:eb:7f:67:f9:08:81:09:39:2d:ab:d1:11:f4: ee:99:53:d9:be:53:52:e7:ed:58:32:41:97:e9:ae:ea:af:52: 68:83:86:70:7a:81:4c:f8:d4:4b:fc:9a:d7:0f:1f:98:ad:51: 46:4a:3b:da:f0:cd:0a:c2:12:32:b6:6f:77:ca:60:8f:dd:89: 4d:3a:5d:5d:a3:11:cd:01:a0:c2:0d:2e:9c:d1:79:11:67:30: 2d:18:75:ee -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9MBpct9ZSRjF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YTc2YWM4ZGItYmZhMy00YjZjLTkwZGYtNWVlMWQ1OWE2OTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumC5rCbGIzKjA6eLgA4E8oQpmrPBn/MPjqq9 eQP/bHsI2CLUtMAGcifCXXMvlhK/eiuJ6vh7/Q/VLXtVURX/5BIcggQnQmgGpiLo sai9/j7a2OHXLuWUIf5dX6/OJ7DjJrdEaFeG5DpOHRB43djvUNa2BZwf5djr4Nzw J0TkkQFyiiyxEn37rc0bFPqIePldWW92G5XoavzUcicOhbjYPYLaYa24rRcFyOfI Xdjhu1rrAReDKhAGfHRooDHzRyt2EpOAmMC9E21cAPAzojN/CaFwL76rYOsDjVnn SSQp4QSM0i5SrCDwCIKKl2JeJU7PYcU2XE7L7L3Un1nfBQOCNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLHk86tn8yFJpKWKY+o+svsc0H/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDg5NDhiMDktNmZjMS0z NDRhLTkxMTItNzI4ZDhlZTUyYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB+HGeydKIjc9mhpLslqT/TqhBvYzp/uz9+1fYb RXUgWaNthjIB9S6R4sUPKP39E+lkmexG/mVIn5v8KAugAOCuV7tCE6yBROYTi3+7 JWCwPsbn4bHgpPRgn1MZbLQEQCc7XQ3+EtmvH4FZvJssGyxKCqtaM4mD9rBiVXkC IUT6aZsQXJ90XGO5H5N8OhPTkUSHWdPeP5ppL4I5N4OKMQ3QfB4wsiW2cet/Z/kI gQk5LavREfTumVPZvlNS5+1YMkGX6a7qr1Jog4ZweoFM+NRL/JrXDx+YrVFGSjva 8M0KwhIytm93ymCP3YlNOl1doxHNAaDCDS6c0XkRZzAtGHXu -----END CERTIFICATE-----Generated at Sun Jun 15 20:41:42 2025 by rpki-client